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We propose and study the notions of behaviour type and composition operator making a first step 
towards the definition of a formal framework for studying behaviour composition in a setting suf- 
ficiently general to provide insight into how the component-based systems should be modelled and 
compared. We illustrate the proposed notions on classical examples (Traces, Labelled Transition 
Systems and Coalgebras). Finally, the definition of memoryless glue operators, takes us one step 
closer to a formal understanding of the separation of concerns principle stipulating that computa- 
tional aspects of a system should be localised within its atomic components, whereas coordination 
layer responsible for managing concurrency should be realised by memoryless glue operators. 

1 Introduction 

Component-based design is central in system engineering. Complex systems are built by assembling 
components. Large components are obtained by "gluing" together simpler ones. "Gluing" can be con- 
sidered as an operation on sets of components. 

Component-based techniques have seen significant development, especially through the use of object 
technologies supported by languages such as C-i~i-, Java, and standards such as UML and CORBA. 
There exist various component frameworks encompassing a large variety of mechanisms for composing 
components. They focus rather on the way components interact than on their internal behaviour. We lack 
adequate notions of expressiveness to compare the merits and weaknesses of these frameworks. For a 
meaningful and systematic comparison of component frameworks to be possible, one needs a sufficiently 
abstract formalisation of the notions of both behaviour and glue. 

These notions should capture the properties essential for reasoning about system composition. Intu- 
itively, one can think of coordination as imposing constraints on the joint behaviour of the components 
of the system ||9l[l2l[32l. Imposing coordination constraints means "reducing" the joint behaviour of the 
involved components. Beyond the simple definition of a component model, this requires the following 
two questions to be answered: 

• What is the behaviour of several "parallel" components without any coordination constraints? 

• How does one compare two behaviours? 

We argue that these aspects, as well as the notions of common behaviour of two components and minimal 
behaviour possible in a given framework, cannot be dissociated from the notion of behaviour as a whole. 
There are several goals, for which the work in this paper is a starting point. 

• There is a long-standing debate with a plethora of points of view about separation of concerns 
ifTTl [T3l [141 12TI l26l and in what sense it should be respected. In ||6l[8l, we have advocated for an 
approach respecting a separation of concerns principle, whereby all "computation" performed by 
the system is localised within its constituent atomic components, whereas the coordination layer 
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responsible for managing the parallelism consists of memoryless glue operators. Separation of 
concerns applied in the context of the BIP framework resulted in a very powerful deadlock detec- 
tion tool D-Finder [i5|. Furthermore, it has allowed us to reduce a hard (sometimes undecidable) 
problem of synthesis of reactive systems ||20] 1251 to a less ambitious, but more tractable design 
methodology This separation of concerns principle is rather fragile: in |[T5l . it is shown that a 
slight extension of the BIP glue renders it Turing complete, which makes it possible to construct 
non-trivial systems without a single atomic component. We speculate that, in the setting proposed 
in the present paper, operators such as prefixing and choice are not glue operators. This hypothesis, 
should it be verified, would give formal grounds to our view of the separation of concern principle. 

• Another goal is to define a generic setting for an expressiveness study. In Q, we have proposed 
a first notion of glue expressiveness for component-based systems, generalising the concepts pre- 
sented in |[28l that guided the design of the BIP (Behaviour, Interaction, Priority) framework |@]. 
However, this approach lacks abstraction, since it strongly depends on the choice of the formalism 
for modelling both behaviour (Labelled Transition Systems; LTS) and glue (Structural Operational 
Semantics; SOS |[24l ). which makes the expressiveness comparison questionable and dependent 
on ad-hoc manipulation to make different frameworks comparable. For instance, in a more recent 
paper Q, we have proposed a slightly modified formal model of component behaviour in BIP. 
This entailed a corresponding modification to the definition of glue operators, which resulted in a 
framework only partially comparable to that in [7 |. A general definition of behaviour and glue, as 
in the present paper, is necessary to solve this problem. 

• Finally, a common practice in system engineering consists in applying existing solutions (archi- 
tectures) to given components to ensure behavioural properties (mutual exclusion, scheduling, 
communication protocols, etc.). These architectures can be modelled as composition operators. 
Their simultaneous application should then ensure the application of the coordination constraints 
imposed by both operators. Hence, it is important to understand when and how these architec- 
tures can be combined. This brings forward another question: How does one model the simul- 
taneous application of several composition operators and what are the conditions ensuring the 
non-interference among them? 

This paper is a modest first step towards the above goals. It focuses primarily on the notions of 
behaviour types and composition operators defined in such a way as to allow reasoning about their 
essential properties in a setting sufficiently general to provide insight into how component-based systems 
should be modelled and compared. 

To allow answering the questions that we have emphasised above, a behaviour type must expUc- 
itly comprise certain elements beyond the minimal component model such as LTS. As illustrated, for 
instance, by CCS and SCCS ||22|. different parallel composition operators can be defined on the same 
objects. Hence a parallel composition operator || must be defined as part of a behaviour type. In order 
to avoid confusion with any of the existing parallel composition operators, we use the term maximal 
interaction operator, since, intuitively, the operator defines the maximal set of interactions between two 
components in absence of coordination constraints. 

In order to address the question of comparing the behaviour, we require that two preorders be defined: 
a simulation preorder C and a semantic preorder ^. Intuitively, simulation preorder relates two com- 
ponents if one of them performs only actions that can also be performed by the other, thus generalising 
the classical simulation relation and allowing a formalisation of the notion that composing component 
behaviour amounts to imposing coordination constraints. The role of the semantic preorder is to relate 
components that behave in a similar manner, in particular, the equivalence ~ induced by this preorder 
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is a congruence with respect to composition operators, thus generalising such classical notions as ready 
simulation equivalence and bisimilarity. 

Finally, we need a meet operator ®, rendering a meet-semilattice, to talk about si- 

multaneous application of two composition operators (Section I3.2I ). Let /i and /2 be two composition 
operators, which we would like to apply "simultaneously" to a behaviour B. Viewing composition op- 
erators as constraints on B, simultaneous application of the two constraints corresponds intuitively to 
applying their conjunction. However, this idea does not fit into the functional view of operators, since 
neither /i(/2(B)) nor /2(/i(fi)) need correspond to the conjunction of the two constraints. Moreover, 
neither of these two behaviours need be defined, in particular, since the arity constraints of the opera- 
tors are not respected in general. A more direct approach consists in considering the maximal common 
behaviour of /i (B) and f2{B), which is precisely fi {B) ® f2{B). 

The paper is structured as follows. Section |2] introduces the notion of behaviour type and provides 
three examples: traces, LTS and coalgebras of a particular type. Section [3] presents the notion of com- 
position operators and some of their properties. In Section |4l we discuss some related and future work, 
then we conclude in Section [5] 

2 Behaviour types 

Definition 2.1 (Behaviour type). A behaviour type over ^ is a tuple || , E, ^, <8', 0) consisting of the 
following data: 

• A monoid ||,0), where || : 3S is a totally defined associative binary operator with G ^ 
the neutral element; 

• A preorder C C ^ x such that 

1. it is preserved by ||, i.e. for any B\,B2,Bj, G S2 C S3 implies B\ \\ B2 E Bi \\ S3, 

2. for any B G holds C B; 

• A preorder ^ C ^ x =^ and a meet operator (g) : ^ x ^ — )• such that 

3. =^ is preserved by ||, i.e. for any Bi,B2,B3 ^ 3S,B2^ S3 implies Bi \\ B2 ^ B\ \\ S3, 

4. (^/~, =^,(8)), with ~'^'= ^ n is a meet-semilattice. 

Elements of 3S are behaviours. \\ is the maximal interaction operator. Intuitively, Si || S2 is the par- 
allel composition of Si and S2 in absence of any coordination constraints. C is the simulation preorder. 
It has the same meaning as the classical simulation preorder, i.e. Si C S2 means that "S2 can perform at 
least the same executions as Sf. ^ is the semantic preorder. Intuitively, Si ^ S2 means that S2 can act 
as Si in the same coordination context. Si ®B2 is the greatest behaviour realisable by both Si and S2. 

Often behaviour definition explicitly involves an interface, consisting at least of the set of actions a 
component can perform. In this context, it is usually assumed that a universal set of actions is given. 
Furthermore, it is convenient also to assume that this set is equipped with some lattice structure. A 
straightforward example consists in considering finite sets rather than individual actions with the lattice 
sti'ucture induced by set union and intersection. 

2.1 Example: Traces 

Let A be a universal set of actions and Traces be the set of pairs S = (A, T), where A C A is a set of 
actions and T C A* is a prefix-closed set of traces. In particular, £ G T, where e is the empty word. 
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For Bi = (J'i,Ai) and B2 = (72,^2), we define the maximal interaction operator ||, as the interleaving of 

def 

actions of the two behaviours, by putting Bi || B2 = {Ai UA2, T), where 

T {w=(w;)LiGA*|3/C[l,«]:(w;),-e7GriA(w,-),-^/Gr2}. (1) 

This makes [Traces, ||,0), with = (0, {&}), a commutative monoid. 

Equation ([T|l defines the maximal interaction operator through interleaving of traces. The correspond- 
ing semantic preorder is defined thi^ough the notion of sub-sequence, which we denote <=< and define by 
putting, for v,w G A*, 

def 

V oc w <;=^ 3/ C [1, : V = (w,-)/e/ , 

def 

where |w| is the length of w. Furthermore, for an alphabet A and a language T , we define Tl/^ = {v G 
A* 1 3w G r : V oc vv} (notice that, if T C A*, we have T C Tl^). Finally, we define the semantic preorder 
and the operator (g) as follows: 

Si ^ B2 ^ Ai C A2 A Ti C T2IA, , (2) 
'= {AinA2,TilA,fy,,nT2U,nA2)^ (3) 

the preorder C coincides with 

Clearly, for two alphabets A C B and a set of traces T, holds the equality {Tlg)l^ = Tl^, which 
implies immediately that the operator (g) defined by ^ is, indeed, the meet operator with respect to the 
preorder ^. Hence, {Traces / ':^,^,®) is a meet-semilattice. To prove that {Traces,\\,Q, ^,®,0) is a 
behaviour type we only have to show that condition [U (and condition O of Definition l2. ll holds. 

Proposition 2.2. Maximal interaction operator \\ defined by ([7]) preserves the semantic preorder ^ de- 
fined by (|2]). 

Proof. For / = 1,2,3, let B, = (A,, 7]) G Traces be such that B2 ^ B3. By definition Q of ^, we then 
have A2 C A3 and T2 C Ts^^^. Consequently, A\ UA2 ^A\ UA3. 

Let Bi II B2 = (Ai UA2,ri2) and Si || S3 = (Ai UA^Ji^), and consider w = (w,-);.Li G Tu- By 
©, there exists / C [l,?i] such that (w;),g/ G T\ and (w,)/^/ G T2. Since T2 C Ti,lj^^, there exists v G r3 
such that {wi)i0 oc v. Denoting by v the projection of v on Ai U A2, we have v v, which implies 
V G Ts^AiUAt- clear that (w,)/^/ o<: v and that one can interleave v with (w;),e/ in such a manner that 
the positions of w,-, for all / ^ 7, be preserved. Denoting the obtained trace by u, we obviously obtain 
w oc M G ri;^,uA2 73;AiUA2 = ^^is^AiUA," Hcncc Tn Q ri3?AiUA2 ^nd Si II S2 =^ Si II S3. □ 



2.2 Example: Labelled Transition Systems 

Let again A be a universal set of actions and let LT She the set of triples S = (2,A, ^), with Q^fda. finite 
set of states, A C A a set of actions, and C 2 x 2"^ x 2 a set of transitions. The infix notation q' 
is commonly used to denote a transition {q,a,q') G^. Note that, with this definition, transitions are 
labelled with interactions, i.e. sets of actions. This approach is particularly well suited for characterising 
behaviour of components that can communicate through several ports during a single transition ||6]. Such 
behaviour naturally arises when composite components are assembled by parallel composition of sub- 
components. Thus, labels are combined by set union, often denoted by juxtaposition. 
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As in the previous example, we take coinciding preorders C and ^. For Bi = >j) and 

B2 = (22,^2, —^2)' define tlie maximal interaction operator || and the semantic preorder ^ as follows. 

def 

We put Bi II B2 = {Qi X Q2, Ai UA2, -^), where is the minimal transition relation satisfying the 
following SOS rules: 

^1 q'l qi \ '?2 -^1 q'l qi \ q2 ... 

q\q2 >q\q2 qiq2 — >qiq2 q\q2 — >q\q2 

With = ({1},0,0), it is straightforward to conclude that {LTS, ||,0) is a commutative monoid. 
For Si = {Q\,A\,^y) and B2 = (22,^2, —)'2), such that a 1 CA2 consider the maximal i/mw/af/on 
relation R^Q\ y. Q2 such that 

qiRq2 =^ V^i Ai ^1, ^ 22,^ ^ A2 : (^^2 ?2 A a C A q\Rq2^ . (5) 

The semantic preorder ^, is defined by putting Bi =<; B2 iff R is total on Q\. 

Finally, we define the meet operator by putting, for B\ = (2i,Ai,^j) and B2 = (22,A2,^2)' ^1 

def 

B2 = (Gi X G21A1 nA2, — 7>), where is the minimal transition relation satisfying the rule 

qi-^\q'i q2\q2 anb^d 

anb , , ■ 

qm — >qiq2 

Conditions [T]-[3]of the Definition l2. ll clearly hold, and, to show that {LTS, 1 1 , C , ^ , , 0) is a behaviour 
type, we only have to prove the following proposition. 

Proposition 2.3. {LTS/^, ci meet-semilattice. 

Proof. To prove the proposition, we have to show that, for any B,Bi,B2 € LTS, holds Bi (g)B2 ^ ^i)^2 
and B 4Bi,B2 implies B 4B1 0B2. 

Let B = {Q,A,-^), Bi = (2;,A,-,^) (for / = 1,2) and Si 0B2 = (gi x e2,Ai nA2,-^) as defined 
above (for clarity, we skip the indices on the transition relations). 

1. First of all Ai nA2 Q Ai,A2. By symmetry, it is sufficient to show that Bi (g)B2 ^ ^i- Let 
R ^ {Qi X Q2) X Qi be the projection on the first component. 

Consider a state q = (^1,^2) ^ 2i x Q2. By definition of ®, for any q A' q' in B\ ®B2, there exist 

transitions qi A q\ and q2 A q'2 such that aCib = c and q' = (^'1,^2)- Hence, we have c Qa and q'Rq[, 
satisfying the implication ^ is satisfied. Since 7? is total on Qi x Q2, we have Bi B2 ^ B^. 

2. Since B ^ B\,B2, there exist total relations RiQQx Qi (for / = 1 , 2) satisfying the implication 
We define a relation R<^Qx (2i, ^2) by putting qR{q\,q2) iff qRiqi, for both / = 1,2. Since A C Ai nA2 
and R is clearly total, we only have to show that © is satisfied. 

Let q ^ Q and (^1,^2) £ Gi x ^2 be related by R. Consider a transition ^ ^ ^' in B. Since qRiqt, 
for / = 1,2, there exist two transitions 171 -A q[ and q2 A q'2 such that c (la,b and q'Riq'i- We then have 
c <Zar\b and q'R{q[ ,q'2), which satisfies ^ and proves the proposition. □ 

2.3 Example: Coalgebras 

Coalgebras fTfl provide a general framework for unifying various state-based behaviour models such as 
both deterministic and non-deterministic automata, LTS, Mealy machines, etc. The presentation below 
is largely inspired by that in ||29l . 
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Table 1: Extensions of set operations to mappings (/ : X — > F, /i :X[ — )• i^i and /2 : ^2 — ^ Yi) 



fixf2:XixX2^YixY2 

{xi,X2) ^ (/l(^l),/2(-X2)) 


/i+/2:Xi+X2^Fi+y2 


g^f°g 


{f{x)\x(^S} 



Table 2: Structural induction definition of NDF' functors (for any set X and any mapping / : X — )• 7) 



F{X) 


P{f) 


Structure of F 


X 


f 


F = Id 


B 


ids 


F = B 


FiiX)xF2iX) 


Fi{f)xF2{f) 


F = F[XF2 


G(X)A 




F = G^ 


^MX)) 




F = 



We recall, in Table[T] the extensions from sets to mappings of the following four operations: Cartesian 
product X X F, disjoint union X + F, exponentiation X^ (set of mappings A — )■ X) and powerset ^a>{X) 
(set of finite subsets of X). 

Let F be a functor on Set. An F-coalgebra is a pair (5, / : 5 — )• where S is the set of states. 

The mapping / determines the transition sti"ucture of {S,f), whereas the functor F is the type of the 
coalgebra. 

Example 2.4. Functors M = (B x Id)'^, D = B x (1 +Id)'^ and = x ^^(Id)^, where B = {0, 1} 
and 1 = {*}, ai^e respectively the types of the coalgebraic definitions for, respectively, input-enabled 
Mealy machines with the input domain A and output domain B, deterministic and non-deterministic 
automata. For instance, in a D-coalgebra {S,f : S — > D{S)), the components of the mapping f = (o x 5, 
with (0 : S and 5:5^(1 + 5)'*, determine, for each state s £ S, whether it is a final state (mapping 

(O) and the set | (^s,a,d{s){a)^ a G A,d{s){a) G of transitions leaving s. The case where there is no 

transition labelled a leaving the state s is reflected by 5{s){a) = * G I. Notice that, in this example, we 
do not account for initial states of automata; determinism, here, means that only one transition is possible 
from any given state with a given action. 

We define a class NDF' of non-deterministic functor^ on the category Set of sets, defined by the 
following grammar 

F::=Id|B|FxF|f^|^ffl(F), (7) 

where A is the universal set of actions. Id is the identity functor and B 7^ is a join-semilattice with 
bottom. Typical examples of semilattices used to define non-deterministic functors are B = {0, 1 } with 
V 1 = 1 and OA 1 =0; and the trivial lattice 1 = {*}. The functors in NDF— are defined by structural 
induction in Table |2](cf. also Table [T]). 

Consider F G NDF' and let (5i,/i) and (S2,/2) be two /^-coalgebra. For a relation /? C Si x S2, we 



NDF' is a subclass of the class NDF of non-deterministic functors as defined, for example, in II29I . 
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define a relation <^ F{Si) x f (52) by structural induction on F. For x £ F{Si) and y G f (52), we put 



x<Ry 



'{x,y)£R, 


if F 


= Id, 


xWy = y, 


if F 


= B, 


' xi yi Ajc2 y2, 


iff 


= f 1 X f2, X 


Va S A, x(a) <^ y{a), 


iff 




yx' ex,3y' ey.x' <f y', 


iff 





We define the simulation preorder on f-coalgebra by putting {Si,fi) C {82^ fi), iff there exists a 
relation 7? C x S2 total on and such that \/{s\,S2) G /?, f\{s\) <r fii^i)- 

Definition 2.5 (Coalgebra homomoiphism). An F -homomorphism of two f-coalgebras {S\,f\) and 
(52, /2) is a mapping h: S\ ^ S2 preserving the transition structure, i.e. such that the following diagram 
commutes (/2 o /j = F{h) of]) 



Si 

fi 

F{Si] 



S2 

fi 

F{S2) 



where f(/j) is the image of h by the functor f . In particular, for f € NDF' , F{h) is defined by the second 
column in Table |2] 

Definition 2.6 (Bisimulation). Let (Si,/i) and {S2,f2) be two f-coalgebras. A relation 7? C x ^2 is 
a bisimulation iff there exists a witness mapping g : R ^ F{R), such that projections tt,- : /? — S,-, for 
/ = 1,2, are coalgebra homomorphisms, i.e. the following diagram commutes 



5, 

fi 

F{Si) i 



R 



F{R) 



F{7l2 



S2 
fl 

F{S2) 



(8) 



Remark 2.7. In the context of Definition 12.61 if f = f 1 x f2, g = x g2 and /,■ = // x (i = 1,2), 
the left diagram in (|9]l commutes, for 7 = 1,2, and defines a bisimulation on fy-coalgebras {Si,f() 
and (S2,/2)- Similarly, for f = G^, the right diagram in dU commutes, for all a € A, and defines a 
bisimulation on G-coalgebras (5'i,/i(a)) and (52, /2(a)). 



Til 



fi 

FjiSi) i 



R 

Fj{R) 



JZ2 



S2 

fi 

> FjiS2) 



5, 

G(5i) 4 



GiTCi) 



R 



G{R) 



Si 

flia) 



(9) 



Lemma 2.8 ( |[27l ). Consider coalgebras {S,f), {Si,fi) and (S2,/2) with coalgebra homomorphisms 
g : S ^ S\ and h : S ^ S2- The image {g,h){S) = {{g{s),h{s)) \ s G S} is a bisimulation on Si and S2- 

Theorem 2.9 ( II27I ). The union [jj^Rk of a family {Rk}k of bi simulations on coalgebras {Si,fi) and 
(Siifi) is again a bisimulation. 
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Lemma 2.10. Consider F-coalgebras {Si,f[), (52, /2) and (S^jfs) with F &NDF'. The composition 
Ri o/?2 of two bisimulations Ri Q Si x S2 and /?2 ^ -^2 x -^3 i^ a bisimulation on S\ and S3. 

Proof. This lemma follows immediately from the following two facts: 1) comosition of bisimulations on 
F-coalgebras is a bisimulation when F preserves weak pullbacks |!27] ; 2) NDF' functors preserve weak 
pullbacks lUni. □ 



Although Theorem 12.91 allows us to speak of the maximal bisimulation on two coalgebras, the wit- 
ness mapping on this maximal bisimulation need not be unique. The following proposition provides a 
construction of a canonical witness mapping on a bisimulation of two coalgebras. 

Proposition 2.11. Consider a bisimulation R Q Si x S2 on two F-coalgebras and (52, /2) with 

F 

F G NDF'. Let g\,g2 : /? — s- F{R) be two witness mappings. The mapping gi U g2 '■ R ^ F{R) defined 
below is again a witness for bisimulation R. 



F def 
gl^g2 = 



gi=g2, if F = Id or F = B 

= s} xs} a =1.2) 

(10) 



^\Ug\)x{gjUgj) ifF=FixF2, gi = g] xgj ii= 1,2) 



Xa.i^gi{a)Ug2{a)j, ifF = G^ 
gi^gi, ifF = ^M, 



Withgi Ug2 : isuS2) '-^ gl{si,S2)Llg2{si,S2). 

F 

Proof. To prove the proposition, we have to show that U is well defined, i.e. that gi = g2 for either F = Id 

F 

or F = B, and that projections Tii'.R^ Si {i = 1,2) ai^e coalgebra homomorphisms from {R,gi U §2) to 
(Snf)- 

For F = Id, we have, gi = (tti o gj , ttj o gi ) = (/i o ;ri ,/2 o ttj) = (tti o g2, 7r2 o §2) = g2- 
For F = B, we have F (tti ) = ids and gi = id^ ogi = fiom = id^ og2= gi- 

The proof that tt, ai^e coalgebra homomorphisms is by structural induction on F. It is trivial for the 
cases F = Id and F = B. For the cases F = Fi x F2 and F = G^, it follows immediately from Remark l277] 
Finally, for F = ^co{G), we have J^a>{G){n,-) o (g^ Ug2) = (=^«(G)(7r,) 0^1) u {/^Min,-) o g2) = 

{fi o Tli) U {f o m) = {fi o Tli). □ 
We define the semantic preorder on F-coalgebras with F G NDF' by putting {S\,f\) ^ {S2,f2) iff 

def 

they have a bisimulation total on ^i. The meet operator is defined by putting {Si,fi ) ® {S2,f2) = {R,g), 
where R is their maximal bisimulation and g :/?—)• F (/?) is the witness mapping maximal with respect 

F F 

to U defined by ( flOl ). Observe that U can be appUed point-wise. Furthermore, for each (^1,^2) G x ^2, 
there is only a finite number of possible values for the bisimulation witness mapping. Hence, {R,g) is 
defined uniquely. 

Proposition 2.12. {Set^oF' /— , i^ a meet-semilattice, where SgIndf' i^ the category of F -coalgebra 
with F G NDF'. 

Proof. First of all, Lemma l2. lOl implies the transitivity of To complete the proof, we must show that, 
in the above context, {R,g) is, indeed, the meet of (5i,/i) and (S2,/2). 

Let {S,f) be an F-coalgebra such that (S,/) =<! (5,-,/,), for / = 1,2. Then there exist two correspond- 
ing coalgebras {Ri,gi) such that each /?,• C 5 x Si is a bisimulation on {S,f) and (5;,/,) total on S. Since 
Ri and R2 are total on S, and since R is maximal, R is total on the image Ri {S) C ^i. 
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Since both idn and the projection tt : /? — > are coalgebra homomorphisms (the latter by definition 
of bisimulation), Lemma implies that the image {7i,idR){R) is a bisimulation on {Si,f\) and {R,g). 
Moreover, it is total on Ri{S). We conclude, by observing that, by Lemma [2. 101 Ri o (7ijdj{) is a 
bisimulation on (5,/) and {R,g), total on S, i.e. 

In the general case, the subject of coalgebra composition has been considered, for example, in IISIITtI. 
Here we provide, for a functor F € NDF' , an example of the f -coalgebra composition operator along the 
lines of ifTTl . We define the maximal interaction operator || by putting, for any two F-coalgebras (^i ,/i) 
and {S2J2), 

{Si, A) II (S2,/2) =^'(Si xS2,/i 11/2), (11) 

with 

(/i ||/2):5ix52^f(5ix52) 

F , (12) 

(51,^2)^/1(^1) f2{s2) 
01 ,02 

f 

where >^ : F{X) x F{Y) — F{X x Y) is defined by structural induction on F. For any x G F{X) and 
y G F{Y), we put 



F def 

X txi y = 



{x,y), iff = Id, 

x\/y, iff = B, 

^3^1, ■X2||3'2) , ifF = Fy-KF2,x = {xx,X2)iinAy = {yi,y2), (13) 

Xa.{x{a)§^^y{a)), if F = G^. 

{y^^^y|y Gx,y Gj}, iiF = i^^{G). 

As it has been observed in |fT7T|, the composition operator defined by ([TT]) and (fT2l) is well-behaved, 
provided that ixi is a natural transformation of functors from F x F to F. In particular, this would 
guai^antee that this composition operator preserves coalgebra homomorphisms and, consequently the 
semantic preorder defined above. 

Proposition 2.13. cx] is a natural transformation from F x F : Set Set to F : Set Set. 

Proof. We prove, by structural induction on F that, for any morphism h = {hi x /12) : X xY ^ X' xY' , 
the diagram 



F{X)xF{Y) 

(FxF){h) 

F{X')xF{Y') 



F 

1X1 
X.Y 



F 

x'.r 



> F{XxY) 

F(h) 

> F{X'xY') 



^ Observe that the maximality of g is only used to prove the uniqueness of {R,g)- Thus, {S,f ) =4 (^,g')' foi' ™y witness 
mapping g' : P{R)- 
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is commutative, i.e. that, for any x E F{X) and y S F{Y), holds 

F{hxh2)[x^^y) = F{h,){x) ^^,F{h2){y). (14) 

Case 1. (F = Id) 

M{h, X /J2) (^ll)^) = {h, X /i2)(x,3;) = {h,{x)M{y)) = M{h,){x) M{h2){y) . 
Case 2. (F = B) 

B(/Ji X /12) = /JB(^Vy) =.xVj = id^{x)y id^{y) = ^{hi){x) B(/j2)(j) . 

Case 3. {F = F\X F2) Let ;t = (;<ci ,.^2) and y = {yi,y2)- 

/ Fi xF^ \ 

(Fi X F2)(/^i X h2) [ixuX2) t< - {yuy2)) = 

= {Fi{hi X /72) X F2(/zi X /72)) (xy ^ yi, X2 ^ J2) by (O and the definition in Table|2] 

= [Fi {hi X /12) {x\ ^ ) , ^2(/ii X /i2) {x2 3^2) ) by the definition in Tabled 

= (Fi(/ji)(xi) Fi{h2){yi), F2{hx){x2) J|, F2(/i2)(j2)) by the induction hypothesis 

= (Fi(/ii)(xi),F2(/Ji)(^2)) (Fi(/^2)(3'i),f2(/t2)(j2)) by m 

= {Fi X F2)(/Ji)(-Xi ,X2) (Fi X F2){h2){yi ,3^2) by the definition in Table[I] 

Case 4. (F = G^) 

GA(/llX/i2)(x M = 

= G(/7i x/72)oAa.(xH ^^^(a)) 
= Xa. {G{hxh2)(x{a)§i^y{a))) 
= Xa. (G(/zi)(x(a))^M G(/i2)(K«))) 
= (Xa.G{hi)[x{a))) {Xa.G{h2){y{a))) 
= G\h){x) f GHh2){y) 



by ([T3] ) and the definitions in Tables [T] and |2] 
by the definition of function composition 
by the induction hypothesis 
by 

by the definitions in Tables [T] and [2l 
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Case 5. (F = ^co{G)) 



,{G){h,xh2)[x^^^\ 
= |g(/jix/i2)(x' 



x' ex 
y'ey 

x' ex 
y'ey 



X ^,y 



II & II 

X ^,y 

X'J' ^ 



;c"G{G(/ji)(;c') 
y'G{G(/z2)(y) 



x! G x} 

y ey} 



a,(G(/Ji))(x) 

y G ^«,(G(/i2))(y 



^a,(G)(/^i)(x) "^t^^^^ ^«(G)(/^2)(y 



by (fT3l) and the definitions in Tables [T] and |2] 
by induction hypothesis 

by the definition in Table [T] 

by ([T3l) and the definition in Table |2l 



□ 



Finally, we put Of = (1,/];!), with : 1 ^ F(l) defined, once again, by structural induction on F\ 



def 



*, ifF = Id, 

±, ifF = B, 

ifF = ^«(G), 



where ± G B is the bottom of B. 

Clearly, taken together, the elements defined in this section form a behaviour type over the family of 
F-coalgebras. 



3 Behaviour composition 

3.1 Composition operators 

Assume that a behaviour type ||, ^, (8),0) is given. 

Definition 3.1 (Composition operator). An n-ary operator / : ^ is a. composition operator iff it 

satisfies the following properties, for any B\, . . . ,Bn,B £ 

1. f{Bi,...,Bn) EBi II ••• \\Bn, 

2. For any / G [l,nl Bt 4 B implies /(Si, . . . . . . =^ /(Bj, . . . ,B, . . . 

We denote by the set of all composition operators, 'la = Un>i where "^("^ is the set of all 
n-ary composition operators. 

Among the immediate consequences of the above definition, one should notice the following facts. 

Lemma 3.2. 1. The equivalence relation ~ = ^ n is a congruence with respect to composition 
operators; 
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2. The maximal interaction operator \\ is a composition operator; 

3. For any Bi ,62 S ''^> one has Bi C Bi \\ B2. 

Proof. The first two statements of the lemma are trivial. The third one is proven by observing that C S2 
and, consequently, Si ~ Si || C Si || S2. □ 



Definition 3.3 (Composition of operators). For an n-ary operator /i : 
— > and / G [ 1 , «] , the {n + m—l ) -aiy operator /i o,- /2 is defined by 



an m-ary operator /2 : 



(/iO,/2)(Bi,...,B« 



/l (Bi,- ■ ■ ,5,-_i,/2(S„, . . . ,Bn+m-\),Bi, . . . ,S„_i^ . 



(15) 



Lemma 3.4. A composition of two composition operators is also a composition operator. 



Example 3.5 (BIP interaction model). A convenient way of defining composition operators is through 
the use of SOS rules. For example, consider the behaviours specified by LTS (see Section l2!2l ). In the 
BIP interaction model |6l, given 7 C 2'^, the corresponding ?i-ary composition operator is defined on 

def 

behaviours S, = for / e [1,«], by putting /(Si, ... ,S„) = (nLi G/'ULi^n^)' where ^ 

is the minimal transition relation satisfying the following set of SOS rules 



J lel L J i<^l 



q'l.-.q'n 



aey 



(16) 



qi...qn 

Proposition 3.6. Any operator f defined as above is a composition operator on LTS. 

Proof. We have to show that / presei-ves the preorder =<;. By symmetry, it is sufficient to prove that, for 
Si ^ Si and S2, . . . ,S„, we have /(Si,S2, . . . ,S„) ^ /(Bi,S2, . . . ,S„). First of all, since A\ C Ai, we 

haveULiA-^^"iUUL2^-- 

Since Si ^ Bi, there exists a relation ^1 Qi x Qi total on Qi and satisfying (|5]). We can then 

define a relation M C (Qi xU'LiQi) x (2i ^U'LiQi)^ by putting {qi,q2, . . . ,qn)^iqi,q2, ■ ■ ■ ,g'n) 
^i^i^i and qi = q\, for / G [2,«]. This relation is clearly total. Let ^1^2 ■ • • ?i • • ■ ^« be a transition 
in /(Si,S2, . . . ,S„) and let q\SS\^qi. By definition of the operator /, this transition must be inferred by 
the rule ([T6l ) from a set of transitions {qi <?■},£/ with a = U,e/^(- If 1 then clearly qi = q\ and the 
corresponding transition qiq2 ...q„ A- q\q'2 ■■■q'n is possible in f{B\,B2, . ■ . ,S„). If 1 G /, by (|5]l, there 
exists a transition ^1 <fi' such that ai (lb\ andq[^iqi'. Hence, a = ai U|J,e/\{i} fl',- C Z7UU,e/\{i} 
b and, by ([T6l) . q\q2. ■ -qn q\ qi- ■ ■ qn, which proves the proposition. □ 

Example 3.7 (Negative premises). Consider the family of SOS operators with negative premises, that is 
defined by the rules of the form 



/£/| {qi=q'i i^l] {^jT^j j^J,keKj^ a = [Jieiai 



q\...qn -^q\...q'n 



(17) 



where qj -f—^j means that there is no transition labelled b j possible from the state qj of behaviour Bj. 
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It is easy to see that such operators do not preserve simulation relation =^ and therefore are not 
composition operators on the LTS behaviour type as defined in Section l2!2l An adaptation of the ready 
simulation relation from the initial proposition by Bloom lITOl is necessary to obtain a behaviour type, 
for which such operators would, indeed, be composition operators. 

Let us now revisit the separation of concerns principle mentioned in the introduction. In our context, 
this principle consists in separating the computation of a system from the application of glue operators 
coordinating its atomic components. Intuitively, this means that no additional behaviour should be intro- 
duced by application of a glue operator. Not only glue operators are limited to restricting the behaviour 
of atomic components by imposing coordination constraints (cf. condition [T] of Definition 13. lb . but, on 
top of that, they should be memoryless. Intuitively, this corresponds to requiring that two conditions be 
satisfied: 1) the glue operator should not add state to the coordinated system and 2) the actions possible 
in a global state of the composed system are completely determined by the properties of the correspond- 
ing states of the constituent subsystems. The latter condition is justified by the fact that a memoryless 
operator is unaware of any states of the system other than the current one. In order to impose these 
additional requirements, we need a formal notion of state, provided precisely by coalgebras. 

Definition 3.8. Let be a Set-functor. An n-ary composition operator gl on a behaviour type over the 
family of F-coalgebras is a glue operator iff there exists a natural transformation sync : F" F, such 
that, for any set {B, = (S,-,/;) | / € of f -coalgebras, gl{Bi,. . . ,6„) = (S,/) with S = n"=i 

f{s) = sync{fi{si), ... J„{sn)), for all s = {si,...,Sn) G 5. 

We now consider two classical operators, namely the prefixing operator and choice. The former is 
a unary operator, which consists in executing a given action before "running" the behaviour to which 
the prefixing is applied. The latter is an associative and commutative binary operator, which consists 
in running exactly one of the behaviours to which it is applied. In order to implement either of these 
two operators, one has to "remember" that, respectively, the initial transition or the choice of the two 
components has been made, thus adding state to the composed system. 

For behaviour types based on coalgebras, the binary choice operator + can be formally defined as 

the coproduct functor on the category of coalgebras, i.e. + (52, /i) ^= {Si +S2,f\ + fi). 

Hypothesis 3.9. Let F be a Set-functor weakly preserving pullbacks. In a behaviour type over F- 
coalgebras with the semantic preorder defined as in Section IZil there is no glue operator gl, in the sense 
of Definition \3.8\ such that gl +. 

To formulate a similar hypothesis for the prefixing operator, a notion of initial state is necessary. 
Although such a notion is provided by pointed coalgebras, we omit this discussion in this paper. 

Notice also the distinction between choice and interleaving. The former consists in choosing once 
and for all the behaviour to run, whereas the latter makes this choice independently at each execution 
step. 

3.2 Combining composition operators 

Although composition of operators introduced in Definition 13.31 allows to combine several operators 
hierarchically, it does not allow "simultaneous" application of the constraints imposed by two operators. 

Example 3.10 (Simultaneous application of two operators). Indeed, consider, for example, for / € [1,4], 
Bj = {Qi,Ai,^) e LTS (see Section l2!2l ) and four given actions a,-, such that a,- € A,- and a, ^ Aj for 
/ 7^ j. Consider also two quaternary composition operators /i , /2 G "^^^^ , such that the action of f\ 
consists in synchronising the actions a\ and a2 (cf. Example 13.51 ) of the first two components it is applied 
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to, whereas synchronises the actions a^, and a4 of the last two of its arguments. More precisely, 
/i(Si,S2,S3,S4) = Ya,a2{Bi,B2) \\ B3 \\ S4 and /2(Si,B2,S3,S4) =Si II B2 II Ya,a,{Bi,B4), where the 
binary operator ja, parametrised by an interaction a (here, a = a\a2, for /i, and a = aT,a4, for /2) is 
defined by the following rules, x and y being action variables. 



qi^ q\ x^a q2^ q'2 ^1 ^ ^1 ^2 ^ ^2 



X I 1 X I J .vUv , , 

qxqi — >q\q2 qiqi — >q\q2 ^1^2— > ^1^2 

1^,- ^ q'j a n A,- / ej = £? n A,- = oj 



(18) 
(19) 



91^2 — >qiq2 



Intuitively, simultaneous application of f\ and /2 to any components Si, B2, B3, 64 should enforce, 
on one hand, the synchi^onisation of a\ and a2 in Bi and B2 respectively, and, on the other hand, the 
synchronisation of respectively as and in B3 and B4. However, the result /i (Bi ,62 1^3 1^4) of applying 
/i is a single component, to which /2 cannot be applied any more, since the latter is a quaternary operator. 

Furthermore, considering the specification of the 7^ operator above as "enforcing the synchronisation 
of actions belonging to the interaction a", one would expect the simultaneous application of 70,^2 and 
Ja^cn to any set of behaviours to achieve the same effect as above, without having to explicitly define 
operators f\ and /2 and avoiding the associated problem discussed in the previous pai^agraph. 

First of all, the semantic preorder ^ and the operator Cg) can be canonically extended to composition 
operators, provided they have the same arity: for any n>\ and gli,gl2 € 

fi4f2 ^ VBi,...,B„G=^^, (fiiBu...,Bn)4f2{Bi,...,B„)), (20) 



VBi,...,B„G^, (/i®/2)(Bi,...,B„) =^ /i(Si,...,S„)0/2(Bi,...,B„). (21) 
Proposition 3.11. ('^(")/~, ^, (g)) is a meet-semilattice. 

Proof. Let /i,/2 G be two composition operators and consider / G ^("^ such that fi<^f2 =4 f ^ 
/i ,/2. The right-hand relation implies that, for any B G f{B) =4 /i (B) 0/2(6) = (/i ®/2)(B)- Hence 
/ ^ /i (X) /2 and, together with the left-hand relation, this implies / — /i ® /2- □ 

Example 3.12 (Preorder on SOS operators). Consider once again the LTS behaviour type defined in 
Section 12.21 and the corresponding family of composition operators defined by ([T6] l in Example 13.51 
Identifying each operator with the set of its defining SOS rules, it follows directly from E Lemma 3] 
that, for two such operators fi and /2, /i ^ /2 is equivalent to f\ C /2. Hence, /i (8'/2 = /i n/2. 

Going back to Example l3. 101 (/i (8" /a) (Bi ,62,53 5^4) represents the behaviour where both the actions 
of Bi are synchronised with those of B2, and the actions of B3 are synchronised with those of B4, as 
defined respectively by fi and /2. 

In order to allow application of a given composition operator to any set of component behaviours 
with cardinality at least the arity of the composition operator in question, we introduce below the arity 
extension for composition operators. 

Definition 3.13. The arity extension of an «-ary composition operator / G to arity m > n is the 
composition operator 

y(m) g c^(m) defined by putting, for all Bi, . . . ,B„ G ^, 

f^'"\Bi,...,Bn) = (^/(BfT(i),- • ■ ,BfT(«)) II fifT(«+i) II •• • II Bf7(m)) 5 (22) 

aes,„ 
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where is the group of all permutations of The right-hand side of (l22l ) consists in simultaneously 

applying / to all possible subsets of n components. 

For operators fi and /2 of Example |3J01 we have fi = (r^iaj^"^^ and /2 = (7„3a4)^'^^ 

Lemma 3.14 (Isotony of arity extension). Arity extension preserves the semantic preorder, that is, for 
any /i,/2 G G^"' andm> n, fi 4 f2 implies /i^'"^ ^ f2^'"\ 

Example 3.15 (Disjoint behaviours). Going back to Example 13. 101 of Section [X2] and considering that, 
for / 7^ j, Ui ^ Aj, one can see that 

The assumption that, for / / j, at ^Aj is essential here. It guarantees that the operators jaic^ ^rid 703^,4 do 
not interfere with the behaviour of components 83,84 and 81,82 respectively. Precise characterisation 
of such a notion of non-interference will be an important part of our future work. 

3.3 Symmetrical composition operators 

Notice that the operator defined by (l22l) is symmetrical in the sense of the following definition. 

Definition 3.16. An operator / : X" — )■ F is called symmetrical iff, for any permutation a € S,j and any 
G X, holds the equation f{xi,. . . ,Xn) = fix^(i),- ■ ■ ,Xcr^n))- 

Clearly, an operator / G ^("^ is symmetrical iff / ~ Furthermore, for symmetrical operators, 
one can also unambiguously define the arity reduction. 

Definition 3.17. The arity reduction of a symmetrical n-ary composition operator / G "^^"^ to arity m<n 
is the composition operator G defined by putting, for all Bi , . . . G SS, 

f^'"\8^,...,8n) =^ /(Bi,...,B,„0,...,0). (23) 

Given a symmetrical operator f ^'tf, one can combine both concepts — arity extension and reduction — 

to define the operator / : ^ai^) ^, by putting, for any finite subset B C ^, /(B) =^ /d^D (B). 

Observe that several popular parallel composition operators, such as the ones used in CCS ||23l . CSP 
ifTSll and BIP (6|, are symmetrical. 

4 Discussion and related work 

The complete bibliography, as related to the motivations behind the present paper, is yet to be established. 
However, several contributions can already be mentioned. 

Based on the same observations about the importance of studying glue as a first-class notion. Abstract 
Behavior Types (ABM) were proposed in ||2| guiding the design of the Reo language. ABT propose to 
characterise components as channels (or dataflow transformers) that do not provide any information as to 
the manner in which the defining transformations are computed. This approach is radically different from 
the one taken in the present paper, since the main emphasis is put on one aspect of component behaviour 
(namely the dataflow transformation) and its expressive power with regards to assembling more complex 
transfer functions. In particular composition of channels boils down to pipeline assembly. Although, 
ABT are likely to provide another interesting case study for the behaviour types we propose, they lack 
the abstraction necessary to model a larger class of behaviour as intended here. 



S. Bliudze 



63 



It would be interesting to further verify the robustness of the proposed framework by defining be- 
haviour types based on interface lUl or modal ||T9l automata, whereof the particularity is that the corre- 
sponding standard refinement relations are contravariant as opposed to the examples of this paper. 

Furthermore, although all the examples provided in this paper can be interpreted as state-based be- 
haviour types and, therefore, modelled as coalgebras of the appropriate types, the intention is to keep 
the abstraction level sufficiently high in order to be able to accommodate for behaviour types that do not 
have a clearly identifiable notion of state. In particular, it would be interesting to investigate applicability 
of this framework to continuous time systems as modelled in SimulinlJ^or Modelic£0. 

As mentioned above, most — if not all — behaviour types, of interest for the author of this paper, can 
be modelled as coalgebras of a suitable type. Since their introduction as a model for system behaviour, 
coalgebras have been subject to extensive studies. It seems, however, that most of these studies were 
focusing primarily on coalgebras as a way to model individual component behaviour. Although, in 
E [TtI, coalgebra composition has been addressed in a much more general form than in the present 
paper, some questions remain unanswered: What is the class of coalgebra types, for which a meaningful 
maximal interaction operator can be constructively defined? How does one characterise the composition 
operators other than maximal interaction ? The latter question is related to the work presented in [|T6ll3TI . 
where GSOS-style operational semantics is studied from the categorical point of view. 

Last but not least, an important subject that we have mentioned in this paper and that we are planning 
to address as part of our future work is the interference between glue operators. Consider two glue 
operators gly and gh, and a family of behaviours {B;}"^!- Assume, furthermore, that, for / = 1,2, 
g/;^"^ {B\,...,Bn) satisfies some given property Pi. What conditions have to be satisfied by gh and gh, on 
one hand, and on the other hand, for any of the composite behaviours gli^^\gl/"^ {B\ ,. .. 

j)' ish ^ gh)^"\Bi, ■ ■ ■ ,Bf,), etc. to satisfy Pi AP2? Given computable representations of gl\ and 
gh how does one compute the operator imposing P\ A P2 ? The latter question was partially addressed in 
Example |3.1 2 l of Section [3^ Furthermore, our result in 10 suggests that this example can be generalised, 
on a suitable behaviour type, to SOS operators with negative premises. Can a similar result be obtained 
for a larger class of coalgebras types? 

A first, naive approach consists in defining a class of distributive behaviour types characterised by the 
distributivity of their maximal interaction operator over the meet operator, that is, for any 61,^2,63 € 

{Bi®B2)\\B^ ~ (Bi IIB3) ® (B2 llBs). 

It is easy to see that distributivity of a behaviour type implies that of the arity extension of composition 
operators over the meet operator: for any /i ,/2 G ^'"^ and m>n, 

Assuming that we know how to compute fi^fi, we can then reasonably expect the obtained operator to 
satisfy both properties imposed by fi and /2. 

Although none of behaviour types considered in this paper appear to be distributive, all the counter- 
examples we have considered while preparing the paper were based on the fact that several compo- 
nents shared certain actions. As illustrated by Example 13.151 of Section 13. 2[ "local distributivity" can 
be achieved provided the "absence of conflicts" in the component interfaces. An important question to 
be addressed in the future work is: How can these notions of "local distributivity" and "absence of 
conflicts" be formalised and generalised to larger classes of behaviour types? 

http : //w w w. mathworks . com/products/simulink/ 
^http://www.modelica.org/ 
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5 Conclusion 

The goal of this paper was to make a first step towards the definition of a formal framework for studying 
behaviour composition in a setting sufficiently general to provide insight into how the component-based 
systems should be modelled and compared. 

We have proposed the notions of behaviour type and composition operator, which, while striving for 
generality, allow to capture some essential properties expected when reasoning intuitively about compo- 
nent composition. We have illustrated the notion of behaviour type on three examples, namely Traces, 
Labelled Transition Systems and F-coalgebras with a restricted class of non-deterministic functors. 

In the framework proposed in this paper, a behaviour type is a tuple {^E, ||, C, =<;,(g),0), where 
is the set of underlying behaviours (Traces, Labelled Transition Systems, Coalgebras, etc.); || is the 
maximal interaction operator defining the joint behaviour of two components without any coordination 
constraints; C and ^ are two preorders used respectively to represent "containment", or simulation, 
relation between two behaviours and the semantic relation reflecting the fact that one component can 
be substituted by another one while essentially preserving the intended behaviour. The relation ~ = ^ 
n =^^' is a congruence for composition operators. The example provided in Section [23] supports our 
idea that these two preorders need not necessarily be the same. We require that (^/~, ^, Cg)) be a meet- 
semilattice, whereby the meet operator identifies the common behaviour of two components. Finally, 
the notion of zero behaviour serves as a "sanity check" for the behaviour type. Intuitively, it represents 
a component that does nothing. On one hand, it should not influence the behaviour of other components 
when placed in parallel (for any 5 G B || ~ B) and, on the other hand, it should be simulated by all 
other behaviours (for any B ^ QB). 

The requirement that the semantic preorder of a given behaviour type induce a meet-semilattice struc- 
ture has allowed us to define a meet of composition operators, representing their simultaneous application 
to a given set of behaviours and, consequently, to extend any composition operator to a symmetrical one, 
applicable to any finite set of behaviours. This, together with the definition of memoryless glue opera- 
tors, takes us one step closer to a formal understanding of the separation of concerns principle that we 
have advocated in our previous papers, and which stipulates that the computational aspects of the system 
should be localised in the atomic components, whereas the coordination layer responsible for managing 
concurrency should be realised by memoryless glue operators. 

Finally, we have discussed some related work and key questions, arising from the proposed frame- 
work, that are important for the understanding of fundamental principles of component-based design. 
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